Castle Defense

30 Apr 2025 - joe

Castle Defense: The Dark Siege

A Medieval-Themed Cybersecurity Tabletop Exercise

Exercise Overview

Title: Castle Defense: The Dark Siege
Duration: 4 hours (recommended)
Target Audience: Royal Guards, Court Wizards, Kingdom Scouts, Royal Advisors
Difficulty: Page to Knight Commander-level
Objective: Test the kingdom’s ability to defend against a coordinated siege that combines traditional warfare, sabotage, and dark magic to compromise castle defenses and overthrow the monarchy.

Learning Objectives

  1. Evaluate team coordination across different defensive specialties
  2. Test detection capabilities for insider threats and subversion
  3. Assess communications during rapidly escalating crisis scenarios
  4. Practice decision-making when facing multi-vector attacks
  5. Identify gaps in defensive measures and contingency planning

Exercise Structure

Preparation Phase (2 weeks prior)

  1. Siege Master Selection: Appoint 1-2 individuals to coordinate the exercise
  2. Defender Selection: Identify key personnel from guard, magic, and intelligence divisions
  3. Resource Preparation: Ready necessary maps, communication methods, and simulated castle environment
  4. Pre-Exercise Briefing: Conduct a briefing explaining exercise parameters and expectations

Exercise Roles

  1. Siege Master: Controls exercise flow, introduces scenarios, evaluates responses
  2. Royal Guards: Personnel responsible for physical castle defense
  3. Court Wizards: Specialists in detecting and countering magical threats
  4. Kingdom Scouts: Intelligence gatherers who monitor enemy movements
  5. Royal Advisors: Decision-makers balancing defense with kingdom management
  6. Observers: Record actions, decisions, and potential improvements
  7. Allied Kingdom Representatives: (Optional) Add complexity with requests for aid

Exercise Materials

Required Documentation

  1. Castle defense protocols
  2. Rapid response procedures
  3. Intelligence assessment guidelines
  4. Crisis command procedures
  5. Kingdom resource inventory
  6. Exercise evaluation metrics

Technical Setup (Optional)

  1. Castle map with movable tokens
  2. Communication relays (simulated messenger birds)
  3. Simulated threat indicators (scrolls, artifacts)
  4. Crisis war room

Scenario Background

The Kingdom of Brightstone guards the eastern borders of the civilized realms, with Castle Brightstone serving as its formidable center of military power and governance. The castle’s defenses include:

The kingdom uses a sophisticated defensive system combining military strength, magical wards, and an intelligence network of scouts and informants.

Exercise Narrative

The neighboring Dark Empire has launched a campaign to seize control of Brightstone, using a combination of conventional forces, magical subversion, and infiltration. Their strategy involves weakening the castle from within before the main attack, using agents who have been in place for months. The exercise will test detection and response to this multi-faceted siege scenario.

Exercise Timeline and Scenarios

Phase 1: Subtle Warnings (0:00-1:00)

Setting the Scene (0:00-0:10)

Scenario 1 (0:10): Border Patrol Discrepancies

Expected Actions:

Scenario 2 (0:30): Castle Supply Concerns

Expected Actions:

Scenario 3 (0:45): Unusual Guard Behaviors

Expected Actions:

Phase 2: Escalation (1:00-2:00)

Scenario 4 (1:00): Dark Magic Detected

Expected Actions:

Scenario 5 (1:20): Sabotage Discovered

Expected Actions:

Scenario 6 (1:40): Civilian Unrest

Expected Actions:

Phase 3: Crisis Management (2:00-3:00)

Scenario 7 (2:00): Enemy Forces Detected

Expected Actions:

Scenario 8 (2:20): Royal Decision Point

Expected Actions:

Scenario 9 (2:40): Multiple Front Attack

Expected Actions:

Phase 4: Resolution and Recovery (3:00-4:00)

Scenario 10 (3:00): Critical Vulnerability

Expected Actions:

Scenario 11 (3:20): Turning Point Decision

Expected Actions:

Scenario 12 (3:40): Aftermath Planning

Expected Actions:

Conclusion (3:50-4:00)

Exercise Evaluation

Evaluation Metrics

  1. Detection Effectiveness
    • Time to identify subtle warning indicators
    • Ability to connect disparate threat indicators
    • Success in identifying infiltrators and sabotage
  2. Response Efficiency
    • Speed of appropriate defensive actions
    • Resource allocation during multiple threats
    • Coordination between different defensive specialties
  3. Command Effectiveness
    • Clarity of orders and communications
    • Decision-making under pressure
    • Strategic thinking beyond immediate tactical concerns
  4. Kingdom Protection
    • Protection of critical castle assets and personnel
    • Maintenance of defensive capability during crisis
    • Minimization of civilian impacts

Post-Exercise Activities

  1. War Council Debrief (Immediately following exercise)
    • Initial impressions from key participants
    • Identification of critical vulnerabilities or successes
    • Immediate action items for critical weaknesses
  2. Formal Strategic Review (1-2 days after exercise)
    • Detailed analysis of decision points and outcomes
    • Assessment of kingdom readiness for similar threats
    • Documentation of lessons learned
  3. Defense Enhancement Planning (1-2 weeks after exercise)
    • Development of improved defensive protocols
    • Assignment of responsibilities for security improvements
    • Resource allocation for critical upgrades
  4. Training Adjustments (Ongoing)
    • Modification of guard training to address weaknesses
    • Enhancement of wizard countermeasures against dark magic
    • Improvement of scout procedures for threat detection

Siege Master Guidelines

Pre-Exercise Preparation

  1. Scenario Customization
    • Adjust threat details to match your kingdom’s specific geopolitical situation
    • Modify enemy tactics based on known regional threats
    • Ensure scenarios test key defensive capabilities
  2. Information Management
    • Prepare intelligence reports with varying levels of clarity and reliability
    • Create visual aids for enemy movements and castle defenses
    • Develop role-specific information for different defensive specialties
  3. Environment Setup
    • Arrange exercise space to simulate castle command structure
    • Consider using colored banners/flags to indicate threat levels
    • Prepare method for tracking resource allocation and casualties

During Exercise Facilitation

  1. Maintaining Realism
    • Introduce fog of war and information uncertainty
    • Ensure consequences follow logically from defender decisions
    • Balance between overwhelming force and winnable scenarios
  2. Adaptability
    • Adjust enemy tactics based on defender actions
    • Scale challenge level if defenders are struggling or succeeding easily
    • Be prepared to introduce unexpected complications to test flexibility
  3. Observation
    • Note key decisions and their justifications
    • Identify communication breakdowns or successes
    • Document innovative strategies for future training

Post-Exercise Activities

  1. Leading Effective Debriefs
    • Begin with positive observations before addressing weaknesses
    • Focus on systemic issues rather than individual mistakes
    • Encourage defenders to evaluate their own performance
  2. Documentation
    • Create comprehensive record of exercise events and decisions
    • Compare performance against established kingdom defense standards
    • Develop specific, actionable recommendations

Appendix: Detailed Siege Scenarios

Border Patrol Anomalies

Dark Magic Signatures

Enemy Force Composition

Insider Threat Analysis